I have an urgent question regarding HIPS & USB
Is there any way that we can use HIPS to block USB or in another way Scan USB, Clean and Block it if it was unable to be cleaned ?
waiting you urgent request,
there is a Signature implemented which can Block USB Devices but you can not use it to unblock when the Device was Scanned by VSE for instance.
HIP Signature 1157 - USB Storage Inserted
Sorry but it will not be working with Hips as this would need a Dynamic Block Rule which only gets active when VSE would tell to HIP it has found Malware and the device needs to be Quarantined/Blocked.
An automatic ODS Scan of the inserted USB Drive would be helpful but as far as i know there is no builtin option yet.
With the above said feel free to submit a Feature Addition to VSE for example: